一鍵安裝腳本實(shí)現(xiàn)快速部署GrayLog Server 4.2.10單機(jī)版

由于局點(diǎn)（分支機(jī)構(gòu)）較多，為了快速部署GrayLog單機(jī)版

所以簡單整理了一下GrayLog的安裝步驟腳本，來實(shí)現(xiàn)一鍵安裝GrayLog Server 4.2.10單機(jī)版

只需上傳GraylogServer4.2.10_install.tar.gz和GrayLogServer_install.sh安裝腳本并執(zhí)行一鍵安裝腳本即可完成GrayLog Server 4.2.10單機(jī)版的安裝

(圖片可點(diǎn)擊放大查看)

其中安裝包和腳本的下載鏈接如下

鏈接：https://share.weiyun.com/MySqbCkG 密碼：295bcq

說明：

1、GraylogServer4.2.10_install.tar.gz中為GrayLogServer安裝時(shí)所需的JDK+pwgen+MongoDB+elasticsearch+graylog-server的RPM包使用createrepo方式打包制作成本地yum源來實(shí)現(xiàn)離線yum安裝

(圖片可點(diǎn)擊放大查看)

2、建議的資源配置如下 操作系統(tǒng)：CentOS7.9 CPU 8核 內(nèi)存建議8GB內(nèi)存以上 磁盤大小:建議單獨(dú)一塊數(shù)據(jù)盤，并掛載到/data目錄 3、其中ES和MongoDB未做加密認(rèn)證，因?yàn)橹槐O(jiān)聽在本地127.0.0.1不對外暴露，若需要安全加固，請自行配置

GrayLogServer_install.sh腳本

腳本內(nèi)容如下

#!/bin/bash
#關(guān)閉SELINUX
sed-i's/enforcing/disabled/g'/etc/selinux/config
setenforce0
#解壓安裝包
tar-zxvfGraylogServer4.2.10_install.tar.gz-C/opt/
mkdir/opt/yum_repo_backup
mv/etc/yum.repos.d/CentOS*.repo/opt/yum_repo_backup
cp/opt/graylog_local.repo/etc/yum.repos.d/
echo"priority=1">>/etc/yum.repos.d/graylog_local.repo
#安裝JDK+pwgen
yuminstall-yjava-1.8.0-openjdk-headless.x86_64
yuminstall-ypwgen
cp/opt/yum_repo_backup/CentOS*.repo/etc/yum.repos.d/
#安裝mongodb-server服務(wù)
yuminstall-ymongodb-org

#啟動(dòng)mongodb-server服務(wù)
systemctldaemon-reload
systemctlenablemongod.service
systemctlstartmongod.service
systemctl--type=service--state=active|grepmongod
firewall-cmd--add-port=27017/tcp--permanent--zone=public
firewall-cmd--reload

#安裝elasticsearch
yuminstallelasticsearch-y
#單獨(dú)創(chuàng)建目錄用于存放elasticsearch數(shù)據(jù)
mkdir-p/data/elasticsearch/data
mkdir-p/data/elasticsearch/logs
chown-Relasticsearch:elasticsearch/data/elasticsearch
cp/etc/elasticsearch/elasticsearch.yml/etc/elasticsearch/elasticsearch.yml_default
#修改elasticsearch相關(guān)配置文件
sed-i"s@#cluster.name:my-application@cluster.name:graylog@g"/etc/elasticsearch/elasticsearch.yml
sed-i"s#path.data:/var/lib/elasticsearch#path.data:/data/elasticsearch/data#g"/etc/elasticsearch/elasticsearch.yml
sed-i"s#path.logs:/var/log/elasticsearch#path.logs:/data/elasticsearch/logs#g"/etc/elasticsearch/elasticsearch.yml
#修改JVM內(nèi)存大小
sed-i"s/-Xms1g/-Xms4g/g"/etc/elasticsearch/jvm.options
sed-i"s/-Xmx1g/-Xmx4g/g"/etc/elasticsearch/jvm.options
#啟動(dòng)elasticsearch服務(wù)
systemctldaemon-reload
systemctlenableelasticsearch.service
systemctlrestartelasticsearch.service
firewall-cmd--add-port=9200/tcp--permanent--zone=public
firewall-cmd--reload
curl-s-XGET'http://127.0.0.1:9200/_cluster/health?pretty=true'
curl-s-XGET'http://127.0.0.1:9200/_cat/nodes?v'
#安裝graylog-server服務(wù)
yuminstallgraylog-server-y
cp/etc/graylog/server/server.conf/etc/graylog/server/server.conf_default
#修改graylog-server相關(guān)配置文件
sed-i"s/password_secret=/password_secret=0pAHJtPdZZUb5yHAvFbBezbWAlQwh9CbRX1rshJEVxM0kV7t0SpIgY5q9tLpVEwWLElhG3EtbvQ03mTm9i0HuvWKwlWgWiIJ/g"/etc/graylog/server/server.conf
sed-i"s/root_password_sha2=/root_password_sha2=79a560ed561e6fc57b3d02a59335b7710fada90625e4c661fbb7b780fb92ceaa/g"/etc/graylog/server/server.conf
sed-i"s@#root_timezone=UTC@root_timezone=Asia/Shanghai@g"/etc/graylog/server/server.conf
sed-i"s@#http_bind_address=127.0.0.1:9000@http_bind_address=0.0.0.0:9000@g"/etc/graylog/server/server.conf
sed-i"s/allow_highlighting=false/allow_highlighting=true/g"/etc/graylog/server/server.conf
#修改graylog-server啟動(dòng)時(shí)JVM內(nèi)存大小
sed-i"s/-Xms1g-Xmx1g/-Xms2g-Xmx2g/g"/etc/sysconfig/graylog-server
firewall-cmd--add-port=9000/tcp--permanent--zone=public
firewall-cmd--reload
#啟動(dòng)graylog-server服務(wù)
systemctlrestartgraylog-server
systemctlenablegraylog-server

安裝過程截圖如下

目前只在CentOS7.9環(huán)境下進(jìn)行部署測試，其他版本未測試

[root@centos~]#ll
total642960
-rw-------.1rootroot1648Jul32021anaconda-ks.cfg
-rw-r--r--.1rootroot658378578Jun1811:56GraylogServer4.2.10_install.tar.gz
-rw-r--r--.1rootroot3065Jun1813:07GrayLogServer_install.sh
[root@centos~]#chmod755GrayLogServer_install.sh
[root@centos~]#./GrayLogServer_install.sh

(圖片可點(diǎn)擊放大查看)

(圖片可點(diǎn)擊放大查看)

(圖片可點(diǎn)擊放大查看)

三、登錄GrayLog Web界面

賬號(hào)密碼為

admin/GrayLog@2022

(圖片可點(diǎn)擊放大查看)

(圖片可點(diǎn)擊放大查看)

(圖片可點(diǎn)擊放大查看)

Tips

若需要修改admin登錄密碼請使用如下命令

echo-n"EnterPassword:"&&head-1'
'|sha256sum|cut-d""-f1
并修改/etc/graylog/server/server.conf中root_password_sha2值
重啟Graylog服務(wù)生效